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AMENDMENTS TO THE CLAIMS 

1 . (Currently amended) A network-based service provider architecture, comprising: 
a plurality of cells hosting a multi-tiered application environment, the cells being 

configured into a stacked arch i tur e architecture w hich permits cells to be added or 
deleted without impacting other cells of the plurality of cells; and 

a common logical network layer providing network connectivity and enforcing 
individual access policy of each cell of the plurality of cells, wherein each cell is 
connected to the common logical network layer. 

2. (Original) The architecture of claim 1 , wherein each cell comprises one or more 
servers or devices, the one or more servers or devices sharing network address space 
and access policy. 

3. (Original) The architecture of claim 1 wherein access policy comprises rules and 
mechanisms controlling the flow of data in and out of each cell. 

4. (Original) The architecture of claim 1 wherein access policy comprises at least 
one of authentication, authorization, access enforcement, privacy protections and 
integrity guarantees. 

5. (Original) The architecture of claim 1 wherein the network connectivity comprises 
at least one of a local area network function and a wide area network function, wherein 
the common logical network layer connects cells which are geographically distant from 
each other. 

6. (Original) The architecture of claim 1 wherein the network connectivity comprises 
connecting cells with at least one of private user networks and the Internet. 

7. (Original) The architecture of claim 1 wherein the multi-tiered application 
comprises any function or service that uses resources from more than one cell. 
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8. (Original) The architecture of claim 1 , wherein the multi-tiered application 
environment comprises infrastructure to host multiple users. 

9. (Original) The architecture of claim 1 wherein the cells of the multi-tiered 
application environment comprise at least one of added value functions, system 
administration functions and security monitoring functions. 

10. (Original) The architecture of claim 1 , wherein the plurality of cells comprises at 
least one front end cell and a back end cell, the front end cell including a web server 
front-end delivering content and the back end cell including a database back-end. 

1 1 . (Original) The architecture of claim 10, wherein the front end cell comprises at 
least two front end cells including a first front end cell and a second front end cell, 
wherein access to the first front end cell is shared by all users of the network-based 
service and access to the second front end cell is limited to a designated user of the 
network-based service. 

12. (Previously presented) A method for providing a network-based service, 
comprising: 

receiving data in a common logical network layer from at least one of a cell of a 
plurality of cells of a multi-tiered application and a network; 

configuring the plurality of cells into a stacked architecture which permits cells to 
be added or deleted without impacting other cells of the plurality of cells; 

enforcing access policy of a destination cell of the plurality of cells to which the 
data is directed, if the data is directed to a cell of the plurality of cells; 

enforcing access policy of a source cell of the plurality of cells, if the data is 
received from a cell of the plurality of cells; . 

transmitting the data to at least one of the destination cell and the network. 

13. (Original) The method of claim 12, wherein enforcing access policy comprises 
enforcing rules and mechanisms controlling the flow of data in and out of at least one of 
the source cell and destination cell. 
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14. (Original) The method of claim 12, wherein enforcing access policy comprises 
performing at least one of authentication, authorization, access enforcement, privacy 
protections, and integrity guarantees. 

15. (Original) The method of claim 12, wherein each cell of the plurality of cells 
comprises one or more servers or devices, the one or more servers or devices sharing 
network address space and access policy. 
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